Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133382e3131372e37322e302f32322d3234203d3e203238323538.roa
File:                     3133382e3131372e37322e302f32322d3234203d3e203238323538.roa (raw, json)
Hash identifier:          3ix+OHGjXO2IPcQ9GJ27uaRUlEruxq1ctJXmmPL/my0=
Subject key identifier:   10:07:03:29:FD:53:33:D5:40:92:02:CC:8D:AA:F2:52:9A:F1:D7:A8
Certificate issuer:       /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial:       0EDCCAF72CAB05893B108CC3EDDE97F02D3F13B7
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133382e3131372e37322e302f32322d3234203d3e203238323538.roa
Signing time:             Fri 03 May 2024 21:20:29 +0000
ROA not before:           Fri 03 May 2024 21:15:29 +0000
ROA not after:            Fri 02 May 2025 21:20:29 +0000
asID:                     28258
IP address blocks:        138.117.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:dc:ca:f7:2c:ab:05:89:3b:10:8c:c3:ed:de:97:f0:2d:3f:13:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416296490F899DB0183C491C69520DEECF540394
        Validity
            Not Before: May  3 21:15:29 2024 GMT
            Not After : May  2 21:20:29 2025 GMT
        Subject: CN=10070329FD5333D5409202CC8DAAF2529AF1D7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:cc:cb:f9:da:06:2e:de:00:13:02:9e:28:
                    3c:4a:3f:4c:c0:5d:58:72:cc:c4:30:ee:2c:7e:16:
                    fc:7b:9d:7d:c6:85:d8:44:2d:73:23:fb:24:73:cb:
                    f5:21:81:d2:6f:ad:78:98:56:db:9b:f6:b6:3d:76:
                    25:36:f8:fe:8d:ac:ff:6c:3e:f5:c1:4a:2d:62:cd:
                    f0:7d:a5:97:82:c9:6e:f6:53:82:f0:ef:5f:3f:35:
                    5f:e1:ad:d7:cd:44:8e:a1:42:18:ad:a4:9c:97:0e:
                    25:bc:5e:48:38:44:e1:22:96:94:68:50:0d:2e:fe:
                    8a:cb:c8:70:ee:23:80:46:4f:76:38:c4:60:fd:8f:
                    6e:87:91:97:b5:37:1b:fc:65:2b:03:54:59:bd:b8:
                    52:de:6a:2f:e8:94:60:f7:f7:84:72:a5:14:47:61:
                    82:4d:c8:67:3b:29:66:bb:2e:e9:3c:b5:8d:23:26:
                    35:78:09:43:4c:e7:d8:62:ed:b8:33:81:e3:94:32:
                    8b:e4:6b:0b:6c:47:b4:f9:44:e3:48:3e:f5:b4:01:
                    60:2c:e0:a5:75:91:2d:b0:fb:69:1e:d3:f5:0e:e9:
                    98:f1:4b:17:8d:99:ce:7c:f1:77:39:92:16:cc:11:
                    01:6b:b5:3e:fa:12:c9:25:3b:84:c8:ac:e0:c9:f2:
                    b8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:07:03:29:FD:53:33:D5:40:92:02:CC:8D:AA:F2:52:9A:F1:D7:A8
            X509v3 Authority Key Identifier:
                keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/3133382e3131372e37322e302f32322d3234203d3e203238323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:74:a1:14:79:53:17:90:f6:61:1f:15:9f:52:c0:d1:00:60:
         70:9c:d3:62:58:78:cd:24:4f:1c:3f:e1:34:96:89:9b:c0:48:
         f5:c3:1a:f6:fc:95:7c:0d:6f:22:64:66:e4:43:f3:58:e0:3d:
         b1:cc:ac:22:a8:9a:9b:55:f0:5b:58:5a:08:d3:3d:c3:de:d7:
         93:a1:3c:48:f3:9a:37:3d:7e:d5:5c:8d:d4:66:9f:30:d6:39:
         0d:d0:5d:cb:15:2e:48:1e:64:e2:16:1c:a2:57:96:4a:eb:c0:
         a0:b4:69:bb:79:bf:6b:62:e8:3b:3f:2c:27:b9:e1:85:a3:46:
         f4:cf:b9:e5:db:6a:84:25:0d:8c:41:15:bd:4e:a3:42:40:ac:
         b9:04:a6:e7:90:8a:d3:5c:43:07:71:12:c5:81:d2:39:f2:cf:
         c2:0a:b4:0a:71:ac:7d:f1:c8:9b:1d:dd:e6:ae:bc:20:59:17:
         6c:8d:50:77:2e:ab:5c:98:59:04:a3:40:ee:f7:67:b1:dd:6b:
         94:d8:b5:5f:8b:89:9c:6f:ec:6b:57:99:07:2e:2d:11:14:57:
         d1:55:fe:06:e1:04:1e:31:c7:e0:08:63:14:26:34:78:ca:01:
         a8:6e:4c:93:fd:c1:98:e9:ca:cf:05:74:c0:6a:d0:9d:04:92:
         12:e3:70:bc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDtzK9yyrBYk7EIzD7d6X8C0/E7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE2Mjk2NDkwRjg5OURCMDE4M0M0OTFDNjk1MjBERUVD
RjU0MDM5NDAeFw0yNDA1MDMyMTE1MjlaFw0yNTA1MDIyMTIwMjlaMDMxMTAvBgNV
BAMTKDEwMDcwMzI5RkQ1MzMzRDU0MDkyMDJDQzhEQUFGMjUyOUFGMUQ3QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+czL+doGLt4AEwKeKDxKP0zA
XVhyzMQw7ix+Fvx7nX3GhdhELXMj+yRzy/UhgdJvrXiYVtub9rY9diU2+P6NrP9s
PvXBSi1izfB9pZeCyW72U4Lw718/NV/hrdfNRI6hQhitpJyXDiW8Xkg4ROEilpRo
UA0u/orLyHDuI4BGT3Y4xGD9j26HkZe1Nxv8ZSsDVFm9uFLeai/olGD394RypRRH
YYJNyGc7KWa7Luk8tY0jJjV4CUNM59hi7bgzgeOUMovkawtsR7T5RONIPvW0AWAs
4KV1kS2w+2ke0/UO6ZjxSxeNmc588Xc5khbMEQFrtT76EsklO4TIrODJ8rjfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEAcDKf1TM9VAkgLMjaryUprx16gwHwYDVR0j
BBgwFoAUQWKWSQ+JnbAYPEkcaVIN7s9UA5QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMC80MTYyOTY0OTBGODk5REIwMTgzQzQ5MUM2OTUyMERFRUNGNTQwMzk0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNjI5NjQ5MEY4OTlEQjAx
ODNDNDkxQzY5NTIwREVFQ0Y1NDAzOTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLcEo1dVA2cUxrMmlIVzlnV2VwVER4YXg2alZ2dHVRWWhGdWR3OXI4VGN5LzAv
MzEzMzM4MmUzMTMxMzcyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCinVIMA0GCSqGSIb3DQEBCwUAA4IBAQBkdKEUeVMX
kPZhHxWfUsDRAGBwnNNiWHjNJE8cP+E0lombwEj1wxr2/JV8DW8iZGbkQ/NY4D2x
zKwiqJqbVfBbWFoI0z3D3teToTxI85o3PX7VXI3UZp8w1jkN0F3LFS5IHmTiFhyi
V5ZK68CgtGm7eb9rYug7PywnueGFo0b0z7nl22qEJQ2MQRW9TqNCQKy5BKbnkIrT
XEMHcRLFgdI58s/CCrQKcax98cibHd3mrrwgWRdsjVB3LqtcmFkEo0Du92ex3WuU
2LVfi4mcb+xrV5kHLi0RFFfRVf4G4QQeMcfgCGMUJjR4ygGobkyT/cGY6crPBXTA
atCdBJIS43C8
-----END CERTIFICATE-----
Generated at Fri Mar 14 01:24:07 2025 by rpki-client